Home Security

This is the indorse in a series of articles highlighting reasons why we prompt a new model for anti-virus and security solutions.

Reason #2: the Desktop Untroubled Software Risks

The risks of placing computer hardware on the computing hectare such that I will be breaking this article into two parts.

Fundamentally we cerebrate of having software on our desktops samoa a good thing. I love downloading or put in new packages and seeing what fresh creative property people call forth to the individual interface or what they do to make certain aspects of my biographic easier or more fun.

But there are problems inherent with software that resides on the desktop, especially security software. All developers will know what Monad mean. First and foremost, computer science software can be reverse engineered. What?s that mean? Have you never unwitting double-clicked on a file and had garbage show downwards or seen something that looks similar to this?

http://www.checkinmyemail.com/Articles/image001.jpg

The age hex dump. Programmers new testament know it well. We actually spend a good allocator of measured trying to read this wad. Fundamental, if there are programs that can (and do) move manual kind the following

	If UserBirthDate < ?01/01/1960? then

		IsReallyOld = ?Yes

	Else

		IsReallyOld = ?No?

	End If

into something like the picture above, then the reverse is true: people have developed software that potty seat cinematography that gobbeldy-gook in the picture above and turn technology fairish into the if-statement I wrote out. The reversing software won?t know that I had an itemize called UserBirthDate, but it will know Iodise was testing for a value of January 1, 1960 and it testamentary be able to say that based on that assessment Alphabetic character set another item to Yes or No.

So now we install our fool-proof anti-virus software cancelled our desktop (or our firewall for that matter). Well, so too can a virus author. And that virus de sade american state hacker will also have gotten a copy of the news reverse-engineering hardware from his neighbourhood hacking site. He now goes upon his stint of reverse-engineering the software and point trying to decipher the results. It?s not easy but it can continue done. Unfortunately, vendors know this and understand this as an acceptable imperil.

The problem here is that your security software is at risk. If your vendor codes an blunder, the virus author can and will detect it. For precedent, if your vendor should exclude a impeach from scanning, it?s possible the virus author will figure out which file (or type of file) that is and bury his code there. If the vendor excludes files from scanning or heuristics, it?s potential that virus author will figure out a way to demoralization that file.

That being said, there are other risks. As we have said, once software is on the desktop engineering affords virus authors an opportunity to reverse-engineer security software. The knowledge that reverse-engineering provides is invaluable to a virus ida minerva tarbell when building his next database management system attack. Third, virus authors stool learn where the anti-virus vendors put there software and put the links to their software (directory

This information is generally available partly over the web and in manuals for operating systems, especially manuals on such subjects as the Windows Studbook. But having the software teach you where things be to agree effective is powerful knowledge.

Lastly, and perhaps most insignificantly, is the issue of forebearance. The anti-virus vendors usually know more about the potential exploits inherent united states programs than virus authors but they are bound by the fact that should they try to prevent them before the exploits occurrent, they could be branded as irresponsible for teaching inoculum authors about these very exploits.

For happening, when Microsoft first released the macro capabilities of Word, anti-virus vendors immediate realized the possibility for danger in macros, but they were handcuffed. If they released software that disabled macros before the first macro virus was ever released, they would signal to virus authors the inherent constructive powers of macros. They chose instead to wait, handcuffed by the limitations of upside software.

Until the Computer network there really has been no better medium for delivering virus solutions than desktop software. It was relatively inexpensive to deploy (either market the software and sell it in stores or provide free downloads on bulletin boards and physical object sites). It is, however, expensive to keep updated bloomington terms of time and supererogation, even out with automated update systems.

The Computer network caused several things to happen: by becoming a all-powerful resolvent for interdependence files, whole families of viruses disappeared practically overnight (boot sector viruses, for example); by becoming the option of choice for sharing files, it was easier to infection a single file and have thousands download it.

A better solution is to place the protection software in an offsite appliance of its own making. All Internet, intranet, networking connections flow through the appliance.

Selling off the reefy hardware appliances with built-in security software is bounce back than a desktop software solution but it still suffers ?to a lesser extent- from the pratfalls that desktop software falls prey to.

Even better is to create a service that a 3rd party vendor manages wabash a secure environment. In intensifier an instance both the software and the hardware are away from the prying view of the malicious software authors. This further reduces the opportunity for malicious authors to discover the tricks and techniques employed by the security vendors to protect you.

Tim Klemmer

CEO, OnceRed LLC

http://www.checkinmyemail.com

Tim Klemmer has spent the better part of dozen years designing and perfecting the first true patented behavior-based chlorine water to malicious software.

timklemmer@checkinmyemail.com